# A Declarative Framework for Specifying and Enforcing Purpose-aware Policies

arXiv: https://arxiv.org/abs/1507.08153 · HTML: https://mlsanity.com/paper/1507.08153/

## Key facts

- Cited by 1 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 29 Jul 2015.

## Built on by (most cited first, 1 of 1)

- [Lawful and Accountable Personal Data Processing with GDPR-based Access and Usage Control in Distributed Systems](https://mlsanity.com/paper/2503.07172/) (2025)

## Abstract (arXiv)

Purpose is crucial for privacy protection as it makes users confident that their personal data are processed as intended. Available proposals for the specification and enforcement of purpose-aware policies are unsatisfactory for their ambiguous semantics of purposes and/or lack of support to the run-time enforcement of policies. In this paper, we propose a declarative framework based on a first-order temporal logic that allows us to give a precise semantics to purpose-aware policies and to reuse algorithms for the design of a run-time monitor enforcing purpose-aware policies. We also show the complexity of the generation and use of the monitor which, to the best of our knowledge, is the first such a result in literature on purpose-aware policies.